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Business IMra 

Securant Technologies Delivers End-To-End Security for E- Business With ClearTrust 
SecureControl 3.5 

Business Wire] New York; Jim 14, 1999; Business/Technology Editors; 

Start Page: 1 
Abstract: 

Securant Technologies - a leading developer of access management products that provide a secure 
infrastructure for e-business - today announced ClearTrust SecureControl version 3.5, the only 
security management solution that provides rules- based access control, policy assessment, and 
extensive Public Key Infrastructure (PKI) integration in a single console, ClearTrust SecureControl 
3,5 allows enterprises to centrally manage end-to-end security services for both Web and network- 
based applications, and deliver selective access to e- business resources for customers, 
employees, business partners and vendors. ClearTrust SecureControl 3.5 provides a unified access 
management backbone that uses business rules and resource-based authorization to automate, 
distribute and lower the cost and complexity of administration for large Extranet, Intranet, Internet 
and networked applications. 

For fine-grained control over which application resources users can access, SecureControl 3.5 
authentication rules now allow administrators to specify permission rights at the server, directory, 
application and Web page levels. This new, more granular access control ensures tighter security 
for sensitive information and provides greater flexibility in deploying authentication technologies 
including PKL ClearTrust SecureControl 3.5 provides secure delegation of user administration to 
Extranet partners by enabling administrators to set very precise access privileges for third party 
users. 

To help ensure the highest levels of security as users move between applications, ClearTrust 
SecureControl 3.5 supports multiple authentication methods — including passwords, digital 
certificates, and tokens — within the same session. This feature challenges users for the required 
authentication method as they request access to more secure applications, and allows enterprises 
to set specific types of authentication on a resource-by-resource basis. ClearTrust SecureControl 
3.5 prevents users from using password authentication to gain access to digital certificate- or 
token-protected information. 

Full Text: 

Copyright Business Wire Jun 14, 1999 
SAN FRANCISCO--(BUSINESS WIRE)- June 14, 1999-- 
SecureControl 3.5 Unifies Access Control, Policy Assessment and 
PKI Management to Secure Web and Networked Applications 

Securant Technologies - a leading developer of access management products that provide a secure 
infrastructure for e-business - today announced ClearTrust SecureControl version 3.5, the only security 
management solution that provides rules-based access control, policy assessment, and extensive Public 
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Key Infrastructure (PKI) integration in a single console. ClearTrust SecureControl 3.5 allows 
enterprises to centrally manage end-to-end security services for both Web and network-based 
applications, and deliver selective access to e- business resources for customers, employees, business 
partners and vendors. ClearTrust SecureControl 3.5 provides a unified access management backbone 
that uses business rules and resource-based authorization to automate, distribute and lower the cost and 
complexity of administration for large Extranet, Intranet, Internet and networked applications. 

Multi-Tiered Access Control 

For fine-grained control over which application resources users can access, SecureControl 3.5 
authentication rules now allow administrators to specify permission rights at the server, directory, 
application and Web page levels. This new, more granular access control ensures tighter security for 
sensitive information and provides greater flexibility in deploying authentication technologies including 
PKI. ClearTrust SecureControl 3.5 provides secure delegation of user administration to Extranet 
partners by enabling administrators to set very precise access privileges for third party users. 

To help ensure the highest levels of security as users move between applications, ClearTrust 
SecureControl 3.5 supports multiple authentication methods — including passwords, digital certificates, 
and tokens - within the same session. This feature challenges users for the required authentication 
method as they request access to more secure appUcations, and allows enterprises to set specific types of 
authentication on a resource-by-resource basis. ClearTrust SecureControl 3.5 prevents users from using 
password authentication to gain access to digital certificate- or token-protected information. 

"As enterprises accelerate the deployment of e-business applications and the number of users accessing 
their networks explodes, security management demands can quickly outstrip administrative resources," 
said Eric Olden, Chief Technology Officer, Securant Technologies. "ClearTrust SecureControl provides 
a rules- based management infrastructure designed to unify and automate every facet of application- 
level security, and enable secure delegation of routine administration to lower the costs of e-commerce." 

Industry's First Security Policy Assessment for Access Control 

To help administrators evaluate and verify security policies created using Smart Rules, ClearTrust 
SecureControl 3.5 is the only management product to provide integrated security policy assessment. 
This advanced functionality verifies how the security policy established by a Smart Rule will function 
when a user tries to access the resource. Security policy assessment eliminates potential security risks 
and avoids re-work by allowing administrators to test and make decisions on new security poUcies in 
real time before they are deployed. ClearTrust SecureControl 3.5 security policy assessment also serves 
as an invlauable resource for corporate auditors who need to quickly evaluate an organization's exposure 
in high visibility e- business environments. 

Comprehensive PKI Integration 

For seamless deployment of PKI technologies, ClearTrust SecureControl 3.5 provides Certificate 
Revocation List (CRL) checking, integration with Entrust Direct and the most comprehensive support 
for digital certificate authorities. To ensure the validity of digital certificates, ClearTrust SecureControl 
3.5 features automated CRL checking and will deny access to users with expired or invalid certificates. 
For centralized access control in Entrust environments, ClearTrust SecureControl 3.5 now supports and 
accepts certificates from Entrust Direct as well as browsers. Finally, SecureControl 3.5 now supports the 
most complete list of certificate authorities including Baltimore Technologies, Entrust, Microsoft, 
Netscape, and Verisign. 
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Password Self- Administration 

SecureControl 3.5 provides advanced automation facilities for password management and allows 
administrators to use rules to set and enforce policies that govem password strength, expiration and 
reuse. Using password policy rules, enterprises can securely and confidently delegate to Extranet 
partners password administration for their users. ClearTrust SecureControl 3.5 allows users to re-set 
their own passwords for Web applications via the self-service password function. 

Securant has also enhanced the ClearTrust SecureControl architecture in release 3.5 with a new task- 
based management interface that can conduct query by example searches for faster and simpler 
administration of large user bases. To increase flexibiUty and easy integration into customer's existing 
environments, SecureControl 3.5 now supports Sybase SQL Server and ICL directory services. 

Pricing and Availability 

ClearTrust SecureControl 3.5 is available immediately from Securant Technologies and its business 
partners. Pricing starts at $20 per user. 

About ClearTrust SecureControl 

ClearTrust is an integrated, rules-based and directory-enabled suite of security products that provides a 
unified access management (UAM) infrastructure for secure e-business. The first product in the 
ClearTrust suite, SecureControl, is based on Internet standards and allows enterprises and service 
providers to centrally control user access - including access control, single-sign on, authentication, 
authorization, delegated administration and auditing - to Extranet, Intranet, Internet and networked 
applications. ClearTrust SecureControl uses Smart Rules(TM) technology and a resource-based security 
model to automate the administration of security policy for millions of users and provide dynamic 
updates to access control permissions based on actual business data. By using SmartRules to manage 
security on a resource-basis rather than a user basis, ClearTrust SecureControl dramatically reduces 
administrator workloads. 

Company Background 

Securant Technologies is a leading developer of rules-based access management products that provide a 
secure infrastructure for e- business and lower administration costs. The Company's products centralize, 
unify and automate every component of access management - - access control, single-sign on, 
authentication, authorization, delegated administration and auditing — for e-business resources including 
Extranet, Intranet, Internet and networked applications. Early ClearTrust customers include, First 
Union/The Money Store, Lehman Brothers, and Wells Fargo Bank. The company's partners include 
Baltimore Technologies, BEA / WebLogic (NASDAQ:BEAS), Check Point (NASDAQ:CHKP), 
Entrust Technologies (NASDAQ:ENTU), Fujitsu, lONA Technologies (NASDAQ:IONA), Netscape 
Communications, Oracle (NASDAQiORCL), Sun Microsystems (NASDAQrSUNW) and Verisign 
(NASDAQ:VRSN). Securant is privately held and headquartered in San Francisco. To contact Securant 
call 415.764.4900, visit us on the Web at http://www.securant.com, or write to info@securant.com. 

Unified Access Management, 24/7 Security, ClearTrust, ClearTrust SecureControl, ClearTrust Virtual 
Business Units and SpeedSecure are trademarks of Securant Technologies Inc. Product names 
mentioned herein may be trademarks and/or registered trademarks of their respective companies. 
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